CVE-2012-0694: Improper Input Validation

SugarCRM CE = 6.3.1 contains scripts that use "unserialize" with user controlled input which allows remote attackers to execute arbitrary PHP code...

PT-2019-6725

Name of the Vulnerable Software and Affected Versions SugarCRM CE versions 6.3.1 and earlier Description The issue allows remote attackers to execute arbitrary PHP code due to the use of unserialize with user-controlled input in certain scripts. Recommendations For SugarCRM CE versions 6.3.1 and...